registry / recess-cli / 2.1.0

recess-cli@2.1.0

Safe Recess administration and family AI tools from the command line.

AI Security Review

scanned 11d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. On npm postinstall, the package copies its bundled Recess skill into its named Codex and Claude skill directories. An explicit setup command may fetch a Recess skill bundle and replace Markdown within those same directories.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm postinstall; explicit recess setup command

Impact

Changes instructions available to Codex and Claude for Recess CLI tasks; no broad agent configuration or credential exfiltration was confirmed.

Mechanism

first-party agent skill installation and update

Rationale

The package performs an unconsented postinstall agent-skill update, warranting a warning under the lifecycle policy. Source limits the mutation to Recess-owned skill directories and shows no install-time network, credential harvesting, or broad control-surface write.

Evidence

package.jsonscripts/postinstall.mjsdist/setup.jsdist/skill-update.jsskill/recess-cli/SKILL.mdskill/recess-cli~/.codex/skills/recess-cli~/.claude/skills/recess-cli

Network endpoints1

api.recess.gg/auth/admin-cli/skill/

recess-cli@2.1.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code